Acton Cleaner Privacy Policy

This Privacy Policy explains how Acton Cleaner collects, uses, shares and protects the personal data of its customers and prospective customers located in our service area. It also describes your rights under applicable data protection laws, including the UK General Data Protection Regulation and related legislation. This Privacy Policy applies to all Acton Cleaner customers and individuals who contact or interact with us in relation to our cleaning services in the area where we operate.

Who We Are

Acton Cleaner is a cleaning service provider operating in the Acton area and surrounding locations. For the purposes of data protection law, Acton Cleaner is the controller of the personal data described in this Privacy Policy. This means we decide why and how your personal data is processed.

Personal Data We Collect

We collect and process different types of personal data about you depending on how you interact with us and which services you use. The categories of data we may collect include:

Identification and contact data, such as your name, address, postcode, and preferred contact details. This may include your mobile number or other contact numbers, and any other contact method you choose to use when communicating with us.

Service and booking information, such as the type of cleaning service you request, property details necessary to provide the service, preferred dates and times for appointments, access instructions, and any special requirements or notes relevant to the service.

Payment and billing information, such as information required to process payments and keep accounting records. Where payments are taken via a payment provider, we may receive payment confirmations and limited payment details, but full card or bank information is typically processed directly by the payment processor acting as a separate controller or processor.

Communication data, including the content of messages, queries, feedback, and complaints that you send to us, and any information you provide when you contact us by phone, online forms, or other communication channels.

Technical and usage data, such as basic information about how you interact with our website or online booking tools, including date and time of access, pages visited, and basic device information. This is used to help us improve our services and ensure the security of our systems.

How We Collect Your Data

We collect personal data directly from you when you contact us, request a quotation, make a booking, confirm or amend a service, or communicate with us in any way. We may also collect information that is generated in the course of providing our services, such as records of completed services and payments.

Limited technical data may be collected automatically when you visit our website, for example through basic logging technologies. Where cookies or similar technologies that are not strictly necessary are used, we will seek your consent where required by law.

Purposes and Lawful Bases for Processing

We only process your personal data when we have a lawful basis under data protection laws. Depending on the context, we rely on the following lawful bases:

Performance of a contract: We use your identification, contact, booking and payment data to provide our cleaning services, manage your bookings, issue invoices, and communicate with you about your service. This processing is necessary to enter into and perform our contract with you.

Legitimate interests: We process certain data to manage and improve our business, such as keeping records of completed work, responding to enquiries and complaints, planning staffing levels, and maintaining the security of our website and systems. When we rely on legitimate interests, we carefully balance our interests against your rights and expectations.

Legal obligations: We process personal data where necessary to comply with legal and regulatory requirements, such as maintaining financial and tax records for the required retention periods, and cooperating with lawful requests from public authorities.

Consent: In limited cases, we may rely on your consent, for example for certain forms of marketing communications or for the use of non-essential cookies. Where processing is based on consent, you can withdraw your consent at any time, and this will not affect the lawfulness of processing carried out before consent was withdrawn.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide services, handle any disputes, comply with legal, accounting, and reporting obligations, and demonstrate that we have complied with our legal and contractual duties.

In general, basic customer and booking records are kept for the duration of your relationship with us and for a period afterwards, typically up to six years, to comply with tax and accounting requirements and to enable us to respond to any legal claims. Communication records and service notes may be kept for shorter or longer periods depending on their relevance and the applicable legal requirements.

When personal data is no longer required for the purposes described in this Privacy Policy, we will securely delete or anonymise it.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with trusted third parties where this is necessary for the purposes described in this Privacy Policy and where we have a lawful basis for doing so.

We may use external service providers acting as processors to help us deliver our services and run our business. These may include payment processors, IT and hosting providers, customer management and booking tools, and professional advisers such as accountants. These service providers are only allowed to process your personal data on our instructions, must keep your data confidential, and must implement appropriate security measures.

We may also share personal data with independent professionals or subcontractors involved in providing cleaning services, but only to the extent necessary for them to complete the requested work safely and effectively.

In certain circumstances, we may need to share personal data with public authorities, regulators, law enforcement agencies, or legal advisers where required by law or where necessary to protect our rights, your safety, or the safety of others.

International Data Transfers

Where possible, we aim to keep your personal data within the United Kingdom or the European Economic Area. If we use service providers that process data outside these regions, we will ensure that appropriate safeguards are in place, such as recognised adequacy decisions or approved contractual protections, to ensure your data remains protected to a standard essentially equivalent to that in the United Kingdom.

Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are proportionate to the nature of the data and the risks involved and are kept under review as technology and legal requirements evolve.

Your Data Protection Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. Your key rights include:

Right of access: You have the right to request confirmation of whether we process your personal data and to receive a copy of the data we hold about you, together with certain information about how we use it.

Right to rectification: You have the right to request the correction of inaccurate personal data and the completion of incomplete data concerning you.

Right to erasure: In certain circumstances, you may request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

Right to restriction: You may request that we restrict the processing of your personal data in certain situations, for example while we are verifying the accuracy of data or assessing an objection you have raised.

Right to object: You have the right to object to processing based on our legitimate interests, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defence of legal claims.

Right to data portability: Where our processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that it be transmitted to another controller where technically feasible.

Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw your consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we make significant changes, we will take reasonable steps to inform you. The most recent version of the Privacy Policy will always apply to our use of your personal data.